Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
File:                     9bf1544b-0e9d-317d-9cc7-e389479204f4.roa (raw, json)
Hash identifier:          iTKymBDOM2YEFYLKOXGbO/Yk4QpXnzmkQgcDpFfgPyA=
Subject key identifier:   E6:B5:64:FA:EA:33:13:72:30:EE:80:75:E1:DE:DF:78:38:25:2F:4D
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F43285848E59BC10D05855CD486A75400
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     36321
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c1:0d:05:85:5c:d4:86:a7:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=224b2ad2-c1b6-4ba8-8919-1bdb74529c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:2d:07:ef:67:67:14:ba:f2:54:ca:fd:84:
                    79:b0:92:b3:86:91:4a:38:12:0d:56:35:81:bc:92:
                    b8:88:14:24:d1:ea:40:42:d1:68:ec:e6:4d:6b:33:
                    5e:ea:80:34:7d:36:51:da:c7:8a:29:8a:9e:10:34:
                    c8:15:6f:25:46:94:03:f9:2c:76:8e:6a:e9:7b:75:
                    48:3c:90:b6:83:25:e7:de:5b:1b:5f:a4:e1:8b:b5:
                    ac:6f:31:f1:d5:47:67:2b:14:c3:cb:da:c1:f1:f0:
                    d6:10:69:f6:5b:7c:4d:1d:e1:ed:0f:a4:ab:f8:7e:
                    0c:63:41:17:ff:e3:d2:71:42:0a:51:f8:3d:2f:49:
                    e2:a1:4e:06:83:c3:00:00:19:25:fa:34:fd:c4:0d:
                    ca:97:e1:29:9d:34:14:05:89:fd:35:74:ef:b5:59:
                    fb:db:2a:cd:d9:b3:7d:30:3c:aa:f3:10:0c:9a:59:
                    d6:e3:57:80:8c:12:12:12:2d:18:ca:d8:b4:be:f3:
                    9d:a4:d3:45:e8:d1:fb:2c:94:cd:a1:ed:c6:87:c5:
                    20:f3:93:d8:ca:e6:38:c9:1d:ea:de:48:73:fa:cd:
                    c3:ca:31:81:90:17:3c:31:80:1b:d6:6c:3f:5e:7e:
                    d0:49:46:a2:c2:7d:bd:72:18:cd:c1:4d:e4:ff:61:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:64:FA:EA:33:13:72:30:EE:80:75:E1:DE:DF:78:38:25:2F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:7f:a5:20:04:23:2b:71:d9:38:25:4d:34:a0:fd:f9:0c:
         c6:76:a6:9b:6c:db:e3:af:6e:57:c7:49:12:cc:92:5f:6a:69:
         2a:87:4d:02:3f:2b:7e:df:8c:e5:44:35:60:db:2b:80:20:eb:
         23:b5:f2:3d:54:44:ea:e7:97:5c:07:7c:7e:0b:98:e5:4e:ec:
         52:e1:7b:7e:0e:8a:b4:e6:c7:7f:c7:95:0b:f4:34:1d:f6:5a:
         64:cc:eb:fd:56:ea:ce:72:e9:1f:70:7c:48:59:35:86:e7:2d:
         1c:39:5a:e2:31:7e:ab:56:df:12:af:f6:8d:4b:36:46:aa:d8:
         79:13:bc:c0:30:33:89:af:37:f7:e7:26:6f:9d:22:c4:aa:46:
         d1:e2:7d:1f:23:83:90:0d:95:ba:b9:b2:ea:44:a7:09:8a:c2:
         3c:f7:9c:cb:56:a1:90:6a:54:c9:56:f9:01:a0:be:58:80:70:
         eb:fe:de:fe:7e:fd:f0:c0:6f:f3:cf:49:11:76:2d:fe:ac:85:
         2e:e5:fa:88:dd:83:ac:67:a3:b1:44:56:11:36:02:58:2e:49:
         55:78:22:a2:5b:da:82:0d:d7:14:80:36:06:9e:37:4a:a3:54:
         70:49:61:bd:5d:05:56:61:67:72:8c:9c:ba:db:4d:36:d5:2e:
         86:05:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:25 2025 by rpki-client